Hacker News new | ask | show | jobs
by mmebane 1402 days ago
The extension author docs [1] say that extensions _should_ obey the global setting, even if using their own telemetry libraries:

> Extension authors who wish not to use Application Insights can utilize their own custom solution to send telemetry. In this case, it is still required that extension authors respect the user's choice by utilizing the isTelemetryEnabled and onDidChangeTelemetryEnabled API.

I suppose the quote in the article is technically correct, because there's no guarantee that _will_ follow this. I'm curious if I could report an extension for abuse and have it removed if it doesn't honor the global setting.

The article also says

> Microsoft’s C# extension (ms-vscode.csharp) sends data to Microsoft. There does not appear to be any setting offered by the extension to turn telemetry off.

I unzipped the extension and looked at the package.json, and it appears to use Microsoft's recommended extension-telemetry library, so I presume it is following the global setting.

I wish Microsoft required extensions to publish detailed telemetry info (or, really, info on any and all external connections an extension might make) on their Marketplace page.

[1]: https://code.visualstudio.com/api/extension-guides/telemetry

1 comments

I can't take a "maybe it does what it says" to my boss and expect approval to use that extension. It might be different if the license didn't agree to telemetry, but that means they can't even sue if the extension leaks private or secure information.

That's a legal minefield.